Sequential Manipulation Against Rank Aggregation: Theory and Algorithm
Not on the map. Why?
Abstract (arXiv)
Rank aggregation with pairwise comparisons is widely encountered in sociology, politics, economics, psychology, sports, etc . Given the enormous social impact and the consequent incentives, the potential adversary has a strong motivation to manipulate the ranking list. However, the ideal attack opportunity and the excessive adversarial capability cause the existing methods to be impractical. To fully explore the potential risks, we leverage an online attack on the vulnerable data collection process. Since it is independent of rank aggregation and lacks effective protection mechanisms, we disrupt the data collection process by fabricating pairwise comparisons without knowledge of the future data or the true distribution. From the game-theoretic perspective, the confrontation scenario between the online manipulator and the ranker who takes control of the original data source is formulated as a distributionally robust game that deals with the uncertainty of knowledge. Then we demonstrate that the equilibrium in the above game is potentially favorable to the adversary by analyzing the vulnerability of the sampling algorithms such as Bernoulli and reservoir methods. According to the above theoretical analysis, different sequential manipulation policies are proposed under a Bayesian decision framework and a large class of parametric pairwise comparison models. For attackers with complete knowledge, we establish the asymptotic optimality of the proposed policies. To increase the success rate of the sequential manipulation with incomplete knowledge, a distributionally robust estimator, which replaces the maximum likelihood estimation in a saddle point problem, provides a conservative data generation solution. Finally, the corroborating empirical evidence shows that the proposed method manipulates the results of rank aggregation methods in a sequential manner.
Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 15 of its 68 references that are in the map. First posted on arXiv 2 Jul 2024.
Builds on
15 of 68 references.
References · 15
- 2018Computational Optimal Transportcited by 765
- 2016Distributionally Robust Stochastic Optimization with Wasserstein Distancecited by 182
- 2021Adversarial Sticker: A Stealthy Attack Method in the Physical Worldcited by 92
- 2017Spectral Method and Regularized MLE Are Both Optimal for Top-K Rankingcited by 46
- 2022Simultaneously Optimizing Perturbations and Positions for Black-box Adversarial Patch Attackscited by 41
- 2023Efficient Robustness Assessment via Adversarial Spatial-Temporal Focus on Videoscited by 20
- 2019Robust Group Synchronization via Cycle-Edge Message Passingcited by 19
- 2021Lagrangian Inference for Ranking Problemscited by 19
- 2019The Adversarial Robustness of Samplingcited by 18
- 2021Optimal Full Ranking from Pairwise Comparisonscited by 16
- 2022A Tale of HodgeRank and Spectral Method: Target Attack Against Rank Aggregation Is the Fixed Point of Adversarial Gamecited by 16
- 2021Poisoning Attack against Estimating from Pairwise Comparisonscited by 14
Built on by
Citing papers per year: 2024: 4; 2025: 2; 2026: 1.
7 papers.
- 2024Visual Adversarial Attack on Vision-Language Models for Autonomous Drivingcited by 35
- 2024Graph Mixture of Experts and Memory-augmented Routers for Multivariate Time Series Anomaly Detectioncited by 19
- 2025SRD: Reinforcement-Learned Semantic Perturbation for Backdoor Defense in VLMscited by 9
- 2025Cannot See the Forest for the Trees: Invoking Heuristics and Biases to Elicit Irrational Choices of LLMscited by 8
- 2024Efficient Backdoor Defense in Multimodal Contrastive Learning: A Token-Level Unlearning Method for Mitigating Threatscited by 6
- 2024Patch is Enough: Naturalistic Adversarial Patch against Vision-Language Pre-training Modelscited by 0
- 2026Localize and Neutralize: Gradient-guided Token Suppression against Visual Prompt Injection Attackcited by 0
- 2026Localize and Neutralize: Gradient-guided Token Suppression against Visual Prompt Injection Attack24 May 2026
- 2025SRD: Reinforcement-Learned Semantic Perturbation for Backdoor Defense in VLMs5 Jun 2025
- 2025Cannot See the Forest for the Trees: Invoking Heuristics and Biases to Elicit Irrational Choices of LLMs3 May 2025
- 2024Graph Mixture of Experts and Memory-augmented Routers for Multivariate Time Series Anomaly Detection26 Dec 2024
- 2024Visual Adversarial Attack on Vision-Language Models for Autonomous Driving27 Nov 2024
- 2024Patch is Enough: Naturalistic Adversarial Patch against Vision-Language Pre-training Models7 Oct 2024
- 2024Efficient Backdoor Defense in Multimodal Contrastive Learning: A Token-Level Unlearning Method for Mitigating Threats29 Sep 2024